skills.rest
chatbotkit
chatbotkitOFFICIAL
Explore all skills by this author →
WebsiteGitHub

hunt-aspnet

Detect ASP.NET ViewState deserialization, machineKey misconfigurations, and trace/elmah exposure.

13|2|Updated Jun 1, 2026
Search Tags:#web-security#deserialization#wcf#asp.net#viewstate#security-hunting#trace-elmah
One-click install
npx skills add https://github.com/chatbotkit/rook --skill hunt-aspnet-chatbotkit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-aspnet
Source: https://github.com/chatbotkit/rook/tree/main/skills/hunt-aspnet
Command: npx skills add https://github.com/chatbotkit/rook --skill hunt-aspnet-chatbotkit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies ASP.NET-specific surface flaws and deserialization vulnerabilities including signed versus encrypted ViewState, machineKey misconfigurations, request-validation bypass patterns, and common admin surfaces like trace.axd and elmah.axd to aid targeted security assessments.

Core Features & Use Cases

  • Detects signed-only vs encrypted ViewState states and links them to potential deserialization bypass chains.
  • Enumerates common ASP.NET attack surfaces such as WCF endpoints, SharePoint/SSO surfaces, and anti-patterns (dual-parser, losFormatter) to map exposure.
  • Provides a structured approach for testing and reporting findings in enterprise environments with focused actionable paths.

Quick Start

Use hunt-aspnet to identify ASP.NET deserialization surfaces and typical misconfigurations on your target web application.

Frequently Asked Questions about hunt-aspnet

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect ASP.NET ViewState deserialization vulnerabilities?▼

Detect ASP.NET ViewState deserialization vulnerabilities by checking signed versus encrypted ViewState states and linking them to potential deserialization bypass chains to map exposure.

What are common ASP.NET misconfigurations that expose security risks?▼

Common ASP.NET misconfigurations include machineKey misconfigurations, trace.axd and elmah.axd exposure, and WCF endpoint vulnerabilities that expose web apps to targeted attacks.

Does this approach work for testing SharePoint and WCF attack surfaces?▼

Yes, this approach works for SharePoint and WCF attack surfaces by enumerating endpoints, SafeControl configurations, and SSO surfaces to map enterprise exposure effectively.

How do I check if ViewState encryption is disabled in an ASP.NET application?▼

Check ViewState encryption status by detecting signed-only versus encrypted states and identifying request-validation bypass patterns linked to deserialization bypass chains.

Why does ViewState fail with machineKey misconfigurations in load-balanced environments?▼

ViewState fails in load-balanced environments due to machineKey mismatches causing MAC validation failures, which this detection approach maps to identify potential deserialization surfaces.

Related Skills

Explore More Software Engineering Skills→
SkobynSkobyn

hunt-aspnet

Discover and exploit ASP.NET-specific vulnerabilities in web applications.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

deserialization-dotnet

Generate ysoserial.net payloads to exploit .NET deserialization vulnerabilities.

Official
Advanced
Bsh13lderBsh13lder
4

web2-recon

Enumerate subdomains, verify live hosts, collect URLs, and scan for vulnerabilities.

Community
Intermediate
neuron-oneneuron-one
25

code-security

Scan application code for OWASP Top 10 vulnerabilities and generate remediation guidance.

Community
Advanced